CVE-2026-7175 — Multiple vulnerabilities in Entradium by Crocantickets
CVE-2026-7175: the Business Name parameter in the /promoters/edit endpoint of the My Profile section of a promoter’s profile, which allows the injection of JavaScript code that …
Published: 2026-10-01 · CVSS: 4.8 · CVSS 4.0
CVE-2026-7175: the Business Name parameter in the /promoters/edit endpoint of the My Profile section of a promoter’s profile, which allows the injection of JavaScript code that will execute on the promoter’s public page;
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7